XGBoost.dll is not signed

xgboost.dll is not code signed, if we package it with our code it might upset the windows defender. Can we code sign the xgboost dll from our code singing cert to bypass this situation.

Yes you may, XGBoost follows the Apache license, so you are free to copy and redistribute the code freely.